GDPR Compliance
How we handle your data under European regulations
Our Commitment to GDPR
Morning Bake complies with the General Data Protection Regulation (GDPR) in all aspects of our business operations. We take your privacy seriously and handle your personal data with care and transparency.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract performance: Processing your name and email to fulfill orders you place with us
- Consent: Using cookies on our website (you can withdraw consent at any time)
- Legitimate interests: Maintaining business records and responding to inquiries
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
Right to Access
You can request a copy of all personal data we hold about you. We will provide this within 30 days of your request.
Right to Rectification
If any information we hold is inaccurate or incomplete, you have the right to have it corrected.
Right to Erasure
You can request that we delete your personal data. We will comply unless we have a legal obligation to retain it.
Right to Restrict Processing
You can ask us to limit how we use your data in certain circumstances.
Right to Data Portability
You can request your data in a structured, commonly used format to transfer to another service.
Right to Object
You can object to our processing of your personal data based on legitimate interests.
Data Retention
We retain customer data for two years from the date of last interaction. After this period, all personal information is automatically deleted from our systems.
If you request deletion of your data before this period, we will comply within 30 days unless legal obligations require us to retain it.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
Access to personal data is restricted to authorized personnel only, and all employees are trained in data protection practices.
Third-Party Sharing
We do not sell or rent your personal data to third parties. We do not share your information with external organizations except when necessary to fulfill your order (such as delivery services), and only with your explicit consent.
International Data Transfers
Your personal data is stored on servers located within the European Union. We do not transfer data outside the EU.
Data Breach Notification
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you within 72 hours and inform the relevant supervisory authority.
How to Exercise Your Rights
To exercise any of your GDPR rights, contact us at [email protected] with your request. We will respond within 30 days.
Please include sufficient information for us to identify you and specify which right you wish to exercise.
Complaints
If you believe we have not handled your data in accordance with GDPR, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet).
Contact
For any questions about GDPR compliance or how we handle your data, contact us at [email protected]